Setting up a VPN connection between two FRITZ!Box networks

Through VPN (Virtual Private Network), you can connect two FRITZ!Box networks at different locations with each other. In this case, a securely encrypted "data tunnel" is established over the Internet; this tunnel allows direct IP access to the devices in the other network and all IP-based services such as e-mail servers, data banks, and file servers can be used without restriction.

Example values used in this guide

In this guide we show you how to connect the FRITZ!Box networks "FRITZ!Box A" and "FRITZ!Box B" to each other. When you set up your connection, replace the values used in this example with actual ones.

MyFRITZ! domain name of FRITZ!Box A:pi80ewgfi72d2os42.myfritz.net

IP network of FRITZ!Box A:192.168.10.0 (subnet mask: 255.255.255.0)

MyFRITZ! domain name of FRITZ!Box B:kw23qbmnj31x5aw75.myfritz.net

IP network of FRITZ!Box B:192.168.20.0 (subnet mask: 255.255.255.0)

VPN password (pre-shared key):secret

Requirements / Restrictions

At least one of the two FRITZ!Boxes must obtain a public IPv4 address from the Internet service provider.

Important:If both of the FRITZ!Boxes are used on Internet connections that use DS-Lite ("Dual-Stack Lite"), you cannot establish a VPN connection. When DS-Lite is active, the status "IPv4 over DS Lite" is displayed under "Connections" on the "Overview" page of the FRITZ!Box user interface.

FRITZ!OS 6.20 or later is installed on FRITZ!Box B.

Important:Some of the settings described here are only displayed if the advanced view is enabled in the user interface. The configuration procedure and notes on functions given in this guide refer to the latest FRITZ!OS.

Enable the option "Hold VPN connection permanently" if FRITZ!Box A has a public IPv4 address and you would like to maintain the VPN connection at all times.

Click "OK" to save the settings.

3 Establishing a VPN connection

If you enabled the option "Hold VPN connection permanently" in the FRITZ!Boxes, then the VPN connection will be maintained at all times.

If the option "Hold VPN connection permanently" is not enabled, then the VPN connection is automatically established whenever one of the networks accesses the other network and it is cleared again whenever it has been inactive for one hour.

Note:Active VPN connections are displayed in the user interface of both of the FRITZ!Boxes under "Internet > Permit Access > VPN".